01

PROGRAM POCKET GUIDE

INSIDERTHREAT

02

“The Army Insider Threat Program is an integrated departmental effort to deter, detect and mitigate risk by employees or service members who may represent a threat to national security.”

Army Directive 2013-18 (Army Insider Threat Program, 31 July 2013)

photo by: U.S. Army Sgt. 1st Class D

avid Parish / 5th Armored Brigade D

ivision West Public Affairs / D

VID

S

1

Mission. The Army Insider Threat Program continuously deters, detects, and mitigates insider threats in order to protect Army personnel, information, and resources.

Overview. The Insider Threat Program synchronizes the threat and protection related initiatives to deter, detect, and mitigate potential insider threats. The Army’s Insider Threat Program spans all operating environments and the full spectrum of threats, from unauthorized disclosures to acts of physical violence.

Why is this significant? The public expects the Army to protect the force and safeguard classified materials and resources.

What are we specifically focused on? Protection of classified information and clearance of personnel granted permissions to access classified information.

2

Escalation of Violence and High-Risk Behavior

In 2013 the Department of the Army, Office of Provost Marshal General developed a Leaders Guide for Preventing the Escalation of Violence. The guide discusses the spectrum of violence and presents the concept that by mitigating lower impact, higher frequency violence (particularly high impact criminal acts) Army leaders may be able to prevent the escalation of violence. The guide goes on to present a list of indicators (not all inclusive) of high-risk behavior and presents ways in which leaders can monitor individual behavior.

Preventing insider threats or terrorist attacks involves much more than physical security measures. Recognizing indicators of high-risk behavior (such as criminal activity

3

or associating with violent groups) which may lead to an escalation of violence, and addressing those issues, may reduce the potential for violent acts committed against the Army community.

Unit leaders, medical service providers, and the Army protection community must communicate effectively to develop a complete and accurate picture of an individual’s propensity for future violence.

• Antiterrorism and Protection Professionals

• Law Enforcement

• Medical and Behavioral Health Providers

• Commanders and Leaders (particularly first line supervisors)

• Soldiers and Civilians

• Chaplains

• Judge Advocates

4

Indicators of High Risk Behavior That May be Attributed to an Insider Threat

• Encouraging disruptive behavior or disobedience to lawful orders.

• Expressing hatred or intolerance of American society or culture.

• Expressing sympathy for organizations that promote violence.

• Expressing extreme anxiety about or refusing a deployment.

• Associating with or expressing loyalty or support for terrorists.

• Browsing websites that promote or advocate violence against the U.S., or distributing terrorist literature or propaganda via the Internet.

• Expressing extreme outrage against U.S. Military operations.

5

• Advocating violence to achieve political / religious / ideological goals.

• Providing financial or other materiel support to a terrorist organization.

• Seeking spiritual sanctioning for or a voicing an obligation to engage in violence in support of a radical or extremist organization or cause.

• Membership in a violent, extremist or terrorist group, or adopting an ideology that advocates violence, extremism, or radicalism.

• Purchasing bomb making materials or obtaining information on bomb construction and use.

• Engaging in paramilitary training with radical or extremist organizations, either home or abroad.

6

• Having ties to known or suspected international terrorists, extremists, radicals, or their supporters.

• Personnel repeatedly unwilling to comply with rules and regulations, or to cooperate with information security requirements, or who appears disgruntled and violent.

7

•

photo by: U.S. Air Force Staff Sgt. Shawn W

eismiller / Arm

y flickr

8

How to Report Suspicious Activity That May be an Insider Threat?

iSALUTE is an Army counterintelligence reporting program to prevent espionage, sabotage, subversion, and international terrorism. iSALUTE supports the Army’s counterintelligence policy established in AR 381-12, Threat Awareness and Reporting

Program. iSALUTE seeks Army-wide community support to report threat incidents, behavioral indicators, and counterintelligence matters that are potential indicators of espionage, terrorist-associated insider threat, and extremist activity.

iSALUTE website: https://www.inscom.army.mil/isalute

9

iWATCH Army is a community program to help protect Army communities from terrorist activities. Any member of the Army community can report behaviors and activities that make them feel uncomfortable and do not look right (suspicious behaviors). iWATCH Army

is a program and partnership between the community and the local Military Police/law enforcement.

iWATCH Army website: https://iwatcharmy.org/index.html

10

Resources

• Army Directive 2013-18, Army Insider Threat Program, 31 July 2013

• AR 525-13, Antiterrorism, 11 September 2008

• AR 380-67, Personnel Security Program, 24 January 2014

• AR 381-12, Threat Awareness and Reporting Program (TARP), 1 June 2016

• The following Combined Arms Center (CAC) website includes information on insider threat, terrorism, incidents of interest, and training requirements: http://usacac.army.mil/organizations/902d-military-intelligence-group/insider-threat-and-terrorism

AT-PG05-070816-V2